Threats affecting pkg:github/wgdashboard/WGDashboard

3 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.8%	CVE-2026-15734WGDashboard · Server-Side Template Injection (SSTI) Vulnerability Critical9.8EPSS 0.8%2026-08-07GCVE DatabaseCVE-2026-15734 A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to execute arbitrary code as root. EPSS 0.8%Vulnerability CWE-1336 #ghsa-95wq-w6wp-f2w9	GCVE Database	2026-08-07
Critical	9.8	EPSS 10%	CVE-2026-15733 · A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier Critical9.8EPSS 10%2026-08-07GCVE Database A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root. EPSS 10%Vulnerability CWE-78 #ghsa-wx9m-5w28-64m2	GCVE Database	2026-08-07
Critical	9.8	EPSS 0.6%	CVE-2026-15732 · A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier Critical9.8EPSS 0.6%2026-08-07GCVE Database A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows authenticated attackers to make arbitrary HTTP requests and retrieve responses. EPSS 0.6%Vulnerability CWE-918 #ghsa-89hj-33q6-8644	GCVE Database	2026-08-07

Page 1 of 1